christoph/flake-nixinator
1
Fork 0
Code Activity

System: Don't use local DNS server for servenix and thinknix (they should be reliable)

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-11 01:52:40 +02:00
parent 256c13c50d
commit 7a5f89cf90
3 changed files with 17 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
system/nixinator/default.nix
View File

@ -42,7 +42,7 @@
interface = "enp8s0"; interface = "enp8s0";
ip = "192.168.86.50/24"; ip = "192.168.86.50/24";
router = "192.168.86.5"; router = "192.168.86.5";
nameserver = "192.168.86.26"; # TODO: Add fallback 8.8.8.8 nameserver = "192.168.86.26"; # TODO: Add fallback 8.8.8.8 (create imperatively then use nm2nix)
autoconnect = true; autoconnect = true;
}; };
"10-ether-1G" = mylib.networking.mkStaticNetworkManagerProfile { "10-ether-1G" = mylib.networking.mkStaticNetworkManagerProfile {
@ -50,7 +50,7 @@
interface = "enp5s0"; interface = "enp5s0";
ip = "192.168.86.50/24"; ip = "192.168.86.50/24";
router = "192.168.86.5"; router = "192.168.86.5";
nameserver = "192.168.86.26"; # TODO: Add fallback 8.8.8.8 nameserver = "192.168.86.26"; # TODO: Add fallback 8.8.8.8 (create imperatively then use nm2nix)
autoconnect = false; autoconnect = false;
}; };
}; };

2
system/servenix/default.nix
View File

@ -52,7 +52,7 @@
interface = "ens18"; interface = "ens18";
ips = ["192.168.86.25/24"]; ips = ["192.168.86.25/24"];
routers = ["192.168.86.5"]; routers = ["192.168.86.5"];
nameservers = ["192.168.86.26" "8.8.8.8"]; nameservers = ["8.8.8.8"]; # NOTE: Use reliable DNS for servers instead of 192.168.86.26
routable = true; routable = true;
}; };
}; };

20
system/thinknix/default.nix
View File

@ -40,7 +40,7 @@
interface = "ens18"; interface = "ens18";
ips = ["192.168.86.26/24"]; ips = ["192.168.86.26/24"];
routers = ["192.168.86.5"]; routers = ["192.168.86.5"];
nameservers = ["127.0.0.1" "8.8.8.8"]; nameservers = ["8.8.8.8"]; # NOTE: Use reliable DNS for servers instead of 127.0.0.1
routable = true; routable = true;
}; };
}; };
@ -69,20 +69,28 @@
# ${pkgs.iproute2}/bin/ip netns add ${name} # ${pkgs.iproute2}/bin/ip netns add ${name}
# ''; # '';
# postSetup = ''
# ${pkgs.iptables}/bin/iptables -A FORWARD -i vps-wg-client -j ACCEPT
# ${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE
# '';
# postShutdown = ''
# ${pkgs.iptables}/bin/iptables -D FORWARD -i vps-wg-client -j ACCEPT
# ${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE
# '';
postSetup = '' postSetup = ''
${pkgs.iptables}/bin/iptables -A FORWARD -i vps-wg-client -j ACCEPT ${pkgs.iptables} -A FORWARD -i wg0-client -j ACCEPT
${pkgs.iptables}/bin/iptables -t nat -A POSTROUTING -o ens18 -j MASQUERADE ${pkgs.iptables} -t nat -A POSTROUTING -o eth0 -j MASQUERADE
''; '';
postShutdown = '' postShutdown = ''
${pkgs.iptables}/bin/iptables -D FORWARD -i vps-wg-client -j ACCEPT ${pkgs.iptables} -D FORWARD -i wg0-client -j ACCEPT
${pkgs.iptables}/bin/iptables -t nat -D POSTROUTING -o ens18 -j MASQUERADE ${pkgs.iptables} -t nat -D POSTROUTING -o eth0 -j MASQUERADE
''; '';
peers = [ peers = [
{ {
name = "chriphost-vps"; name = "chriphost-vps";
publicKey = "w/U8p9fizw0jk8PFaMZXV1N49Ws+q6mUHzNFYtoDTS8="; publicKey = "w/U8p9fizw0jk8PFaMZXV1N49Ws+q6mUHzNFYtoDTS8=";
endpoint = "vps.chriphost.de:51820"; endpoint = "212.227.233.241:51820";
allowedIPs = [ allowedIPs = [
"10.10.10.0/24" "10.10.10.0/24"
]; ];